pulumi-keycloak-kotlin/com.pulumi.keycloak.saml.kotlin/UserPropertyProtocolMapperArgs

UserPropertyProtocolMapperArgs

data class UserPropertyProtocolMapperArgs(val clientId: Output<String>? = null, val clientScopeId: Output<String>? = null, val friendlyName: Output<String>? = null, val name: Output<String>? = null, val realmId: Output<String>? = null, val samlAttributeName: Output<String>? = null, val samlAttributeNameFormat: Output<String>? = null, val userProperty: Output<String>? = null) : ConvertibleToJava<UserPropertyProtocolMapperArgs>

Allows for creating and managing user property protocol mappers for SAML clients within Keycloak. SAML user property protocol mappers allow you to map properties of the Keycloak user model to an attribute in a SAML assertion. Protocol mappers can be defined for a single client, or they can be defined for a client scope which can be shared between multiple different clients.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as keycloak from "@pulumi/keycloak";
const realm = new keycloak.Realm("realm", {
    realm: "my-realm",
    enabled: true,
});
const samlClient = new keycloak.saml.Client("saml_client", {
    realmId: realm.id,
    clientId: "saml-client",
    name: "saml-client",
});
const samlUserPropertyMapper = new keycloak.saml.UserPropertyProtocolMapper("saml_user_property_mapper", {
    realmId: realm.id,
    clientId: samlClient.id,
    name: "email-user-property-mapper",
    userProperty: "email",
    samlAttributeName: "email",
    samlAttributeNameFormat: "Unspecified",
});

import pulumi
import pulumi_keycloak as keycloak
realm = keycloak.Realm("realm",
    realm="my-realm",
    enabled=True)
saml_client = keycloak.saml.Client("saml_client",
    realm_id=realm.id,
    client_id="saml-client",
    name="saml-client")
saml_user_property_mapper = keycloak.saml.UserPropertyProtocolMapper("saml_user_property_mapper",
    realm_id=realm.id,
    client_id=saml_client.id,
    name="email-user-property-mapper",
    user_property="email",
    saml_attribute_name="email",
    saml_attribute_name_format="Unspecified")

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Keycloak = Pulumi.Keycloak;
return await Deployment.RunAsync(() =>
{
    var realm = new Keycloak.Realm("realm", new()
    {
        RealmName = "my-realm",
        Enabled = true,
    });
    var samlClient = new Keycloak.Saml.Client("saml_client", new()
    {
        RealmId = realm.Id,
        ClientId = "saml-client",
        Name = "saml-client",
    });
    var samlUserPropertyMapper = new Keycloak.Saml.UserPropertyProtocolMapper("saml_user_property_mapper", new()
    {
        RealmId = realm.Id,
        ClientId = samlClient.Id,
        Name = "email-user-property-mapper",
        UserProperty = "email",
        SamlAttributeName = "email",
        SamlAttributeNameFormat = "Unspecified",
    });
});

package main
import (
	"github.com/pulumi/pulumi-keycloak/sdk/v6/go/keycloak"
	"github.com/pulumi/pulumi-keycloak/sdk/v6/go/keycloak/saml"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		realm, err := keycloak.NewRealm(ctx, "realm", &keycloak.RealmArgs{
			Realm:   pulumi.String("my-realm"),
			Enabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		samlClient, err := saml.NewClient(ctx, "saml_client", &saml.ClientArgs{
			RealmId:  realm.ID(),
			ClientId: pulumi.String("saml-client"),
			Name:     pulumi.String("saml-client"),
		})
		if err != nil {
			return err
		}
		_, err = saml.NewUserPropertyProtocolMapper(ctx, "saml_user_property_mapper", &saml.UserPropertyProtocolMapperArgs{
			RealmId:                 realm.ID(),
			ClientId:                samlClient.ID(),
			Name:                    pulumi.String("email-user-property-mapper"),
			UserProperty:            pulumi.String("email"),
			SamlAttributeName:       pulumi.String("email"),
			SamlAttributeNameFormat: pulumi.String("Unspecified"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.keycloak.Realm;
import com.pulumi.keycloak.RealmArgs;
import com.pulumi.keycloak.saml.Client;
import com.pulumi.keycloak.saml.ClientArgs;
import com.pulumi.keycloak.saml.UserPropertyProtocolMapper;
import com.pulumi.keycloak.saml.UserPropertyProtocolMapperArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var realm = new Realm("realm", RealmArgs.builder()
            .realm("my-realm")
            .enabled(true)
            .build());
        var samlClient = new Client("samlClient", ClientArgs.builder()
            .realmId(realm.id())
            .clientId("saml-client")
            .name("saml-client")
            .build());
        var samlUserPropertyMapper = new UserPropertyProtocolMapper("samlUserPropertyMapper", UserPropertyProtocolMapperArgs.builder()
            .realmId(realm.id())
            .clientId(samlClient.id())
            .name("email-user-property-mapper")
            .userProperty("email")
            .samlAttributeName("email")
            .samlAttributeNameFormat("Unspecified")
            .build());
    }
}

resources:
  realm:
    type: keycloak:Realm
    properties:
      realm: my-realm
      enabled: true
  samlClient:
    type: keycloak:saml:Client
    name: saml_client
    properties:
      realmId: ${realm.id}
      clientId: saml-client
      name: saml-client
  samlUserPropertyMapper:
    type: keycloak:saml:UserPropertyProtocolMapper
    name: saml_user_property_mapper
    properties:
      realmId: ${realm.id}
      clientId: ${samlClient.id}
      name: email-user-property-mapper
      userProperty: email
      samlAttributeName: email
      samlAttributeNameFormat: Unspecified

Import

Protocol mappers can be imported using one of the following formats:

Client: {{realm_id}}/client/{{client_keycloak_id}}/{{protocol_mapper_id}}
Client Scope: {{realm_id}}/client-scope/{{client_scope_keycloak_id}}/{{protocol_mapper_id}} Example: bash

$ pulumi import keycloak:saml/userPropertyProtocolMapper:UserPropertyProtocolMapper saml_user_property_mapper my-realm/client/a7202154-8793-4656-b655-1dd18c181e14/71602afa-f7d1-4788-8c49-ef8fd00af0f4

$ pulumi import keycloak:saml/userPropertyProtocolMapper:UserPropertyProtocolMapper saml_user_property_mapper my-realm/client-scope/b799ea7e-73ee-4a73-990a-1eafebe8e20a/71602afa-f7d1-4788-8c49-ef8fd00af0f4

Constructors

UserPropertyProtocolMapperArgs

constructor(clientId: Output<String>? = null, clientScopeId: Output<String>? = null, friendlyName: Output<String>? = null, name: Output<String>? = null, realmId: Output<String>? = null, samlAttributeName: Output<String>? = null, samlAttributeNameFormat: Output<String>? = null, userProperty: Output<String>? = null)